{"id":3796999,"url":"https://alion.io/job/erbis-senior-cloud-security-engineer","title":"Senior Cloud Security Engineer","company":{"id":697153,"name":"Erbis","domain":"erbis.com","url":"https://alion.io/company/erbis","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kyiv, Ukraine"],"countries":["UA"],"hiring_countries":["UA"],"hiring_countries_total":1,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Claude","optional":false},{"name":"Claude Code","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Keycloak","optional":false},{"name":"Least Privilege","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"SonarQube","optional":false},{"name":"Terraform","optional":false},{"name":"Amazon Redshift","optional":true},{"name":"GDPR","optional":true},{"name":"Java","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"PostgreSQL","optional":true}],"status":"live","first_seen_at":"2026-11-05T09:38:46Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-07T05:52:41Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About us:\nErbis is a thriving tech powerhouse where innovation meets opportunity. We specialize in building cutting-edge software solutions that drive success for businesses worldwide. At Erbis, we don't just develop software. We create impact. And to do that, we need the best talent in the industry. That's where you come in.\nAbout the role:\nAn Erbis customer runs a supply chain and shipment management platform on AWS for enterprise shippers. Reporting to the CTO, you will own the security of our AWS platform end to end: detection, incident response, identity and access, vulnerability management, and the evidence our customers and auditors ask for.\nYou will have a prioritized roadmap, executive backing and room to build. Our infrastructure is in Terraform, and DevOps and development teams will act on your findings. We work AI-first: you will use Claude Code daily to write infrastructure code, scripts, queries and runbooks, and to build carefully guarded AI triage agents.\nWhat you will do:\nSecurity architecture: multi-account AWS Organizations setup with an organization-wide CloudTrail and log archive, delegated GuardDuty, Security Hub and Config, and service control policies.\nDetection and response: threat detection and high-risk change alerting across all accounts and regions; alert triage, the security on-call and incident response.\nVulnerability management: Security Hub, Inspector and SonarQube findings routed to tickets, a weekly review, and patch plans agreed with DevOps.\nIdentity and access: short-lived, role-based credentials for people and automation; privileged access reviews across IAM Identity Center and Keycloak; Keycloak hardening.\nResilience: incident runbooks, tabletop exercises and tested backup restores, including ransomware scenarios.\nNetwork and data protection: DNS filtering, secrets management, encryption in transit and at rest, a minimal external attack surface.\nAssurance: quarterly external penetration tests; customer security questionnaires and audits; AWS partner reviews (Well-Architected, Foundational Technical Review).\nSecure change: security review of infrastructure and application changes; policies kept current.\nAI-assisted security operations: triage agents you build and tune, with humans approving every action they propose.\nRequirements:\n6+ years in security or infrastructure engineering, with at least 3 years hands-on securing production AWS environments.\nYou work autonomously: you set priorities, make the call and see it through.\nDeep AWS security: IAM and Organizations (SCPs, Identity Center, cross-account roles), CloudTrail, GuardDuty, Security Hub, Config, Inspector, KMS, Secrets Manager, VPC and network controls.\nInfrastructure as code: you write and review production Terraform.\nScripting in Python or Bash for automation and investigations.\nIncident response: you have led real incidents from first alert through containment and post-mortem.\nIdentity and access: SSO, MFA, least privilege, access reviews. Keycloak or another OIDC/SAML provider.\nCompliance: you have produced evidence for SOC 2, ISO 27001 or similar, and answered enterprise customers' security questionnaires.\nYou explain risk plainly to engineers and executives. You get fixes done through other teams, without authority over them.\nFluent written English.\nNice to have:\nHands-on use of AI coding agents (Claude Code or similar) for security engineering, and an understanding of prompt-injection risks.\nClaude Certified Developer or Architect, or a similar AI coding certification.\nAWS Certified Security - Specialty, or OSCP, GCIH, CISSP.\nApplication security: OWASP Top 10, SAST/DAST, working with external penetration testers.\nJava application stacks, PostgreSQL, Oracle or Redshift.\nGDPR and data-protection work in a B2B SaaS.\nSupply chain, logistics or other B2B SaaS background.\nOur perks and benefits:\nPaid Vacation days: 24 working days\nPaid Sick days: 15 working days\nThe opportunity to dedicate up to 10% of working hours for self-education and personal development\nBYOD program (Bring Your Own Device)","description_format":"text","description_chars":4068,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Ukraine","iso":"UA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Security","IT Consulting & Digital Transformation","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-11-05T09:52:44Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":35,"reasons":["conf:4","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/erbis-senior-cloud-security-engineer","json_url":"https://alion.io/job/erbis-senior-cloud-security-engineer.json","meta":{"generated_at":"2026-11-07T06:29:10Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":326,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":697153},"rest":"https://alion.io/mcp/rest/get_company?id=697153"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ferbis-senior-cloud-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ferbis-senior-cloud-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ferbis-senior-cloud-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/erbis-senior-cloud-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ferbis-senior-cloud-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3796999}},{"tool":"search_jobs","arguments":{"company":"erbis.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3796999},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}